shuai19980 Goto Github PK

invoke-obfuscation

PowerShell Obfuscator

invoke-x64dbg-loaddll

调用x64dbg中的loadll.exe白加黑示例代码

iot_sec_tutorial

IoT安全教程

ipinfosearch

ip域名反查、权重查询以及ICP备案查询。便于提交SRC时资产过滤。

java-shellcode-loader

基于Java实现的Shellcode加载器

javascript-obfuscator

A powerful obfuscator for JavaScript and Node.js

jnitrace

A Frida based tool that traces usage of the JNI API in Android apps.

js-forward

前端参数加密渗透测试通用解决方案

js_crack

JS逆向还原混淆

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kalgorithmtools

算法工具

kerbrute

An script to perform kerberos bruteforcing by using impacket

kstools

Android中自动爆破签名工具

lamda

⚡️ Android reverse engineering & automation framework | 史上最强安卓抓包/逆向/HOOK & 集群控制/云手机/自动化辅助框架

leakinfo_finder

批量爬取JS文件中接口信息，添加spring boot actuator目录扫描以及手机号、身份证号码等敏感信息匹配

linux_dirty

更改后的脏牛提权代码，可以往任意文件写入任意内容，去除交互过程

lockbit-black-builder

maigret

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, ThreatCrowd, Malware Bazaar, ThreatFox, Triage and it is able to scan Android devices against VT.

manjusaka

牛屎花 一款C2远控

mrkaplan

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

networksecurityself-study

这是作者的系列网络安全自学教程，主要是关于网安工具和实践操作的在线笔记，希望对大家有所帮助，学无止境，加油。

nps

NPS proxy server authentication bypasses vulnerability detection

okhttplogger-frida

Frida 实现拦截okhttp的脚本

ollydbg-archive

All the latest releases and files for OllyDbg...

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pememoryloader

Load static-compiled PE from remote server.

phishing-sender

Phishing sender是一款针对钓鱼邮件应急演练所编写的小脚本，实际上是封装了swaks，让人们做演练的时候更加方便快捷。

poc